Mango Sandstorm is a apt_group tracked across 8 threat clusters and 12 intelligence report mentions on ThreatCluster. First observed November 5, 2025; most recent activity May 6, 2026.
In early 2026, the Iranian APT group MuddyWater, affiliated with the Ministry of Intelligence and Security, executed a sophisticated cyber operation disguised as a Chaos ransomware attack. Utilizing social engineering…
MuddyWater, an Iran-aligned cyberespionage group, has conducted a targeted campaign against critical infrastructure in Israel and Egypt from September 2024 to March 2025. The group focused on sectors such as…
The Iranian APT group MuddyWater has intensified cyber-espionage activities in early 2026, specifically targeting Israeli government and infrastructure. They have introduced a new Rust-based remote access trojan named…
The Iran-linked MuddyWater APT group has launched a spear-phishing campaign targeting various sectors in the Middle East, including diplomatic, maritime, financial, and telecom entities. The campaign employs icon…
Between June and August 2025, a previously unidentified Iranian cyber actor, dubbed UNK_SmudgedSerpent, conducted targeted phishing attacks against US academics and foreign policy experts. The campaign aimed to steal…
Iran-linked threat actor MuddyWater has launched a campaign against multiple Israeli sectors using a new backdoor called MuddyViper. The attacks also included one confirmed target in Egypt, employing custom tools to…
Between June and August 2025, the Iranian-linked APT UNK_SmudgedSerpent conducted targeted phishing campaigns against US academics and foreign policy experts. The group employed techniques such as credential theft and…
Between June and August 2025, a cyber group identified as UNK_SmudgedSerpent targeted U.S. academics and foreign policy experts focused on Iran. The attackers initiated contact through seemingly benign conversations to…